Differentiating certificate issuers on ISE

[rikkoenig]

Is there a way to differentiate based on certificate issuer or CA on ISE? I have a set of devices that I want to get authorization profile A if they authenticate via EAP-TLS using certificates from CA-1, and profile B if the cert is from CA-2. Is this do-able, and if so, what attributes do I key off of?

TIA

[jrabinow · Accepted solution]

This capability will be available in the upcoming ISE 1.2 release that will be available in the next couple months

There may also be possibilities to have some of this functionality available in an earlier release but would need to check with account team about that